Skip to content
Coffret
Back to the site

Privacy policy

Coffret is built so that there is almost nothing to write a privacy policy about. This page explains exactly what that means, and is specific about the few places where data does exist.

Effective 10 August 2026Last updated 10 August 2026

In short. The app has no account, no server and no analytics. Your financial records are created on your phone, encrypted on your phone, and never sent anywhere. We cannot see them, we cannot recover them, and we could not hand them to anyone else if we were asked.

The exceptions are small and specific: if you contact us we have your message, and on WhatsApp your phone number with it. If you buy the app, Apple or Google processes that purchase and tells us some things about it. This website itself sets no cookies and loads nothing from third parties.

Who is responsible

Coffret is published by Denzel Hayford, trading as Denzel Hayford, a sole proprietor, at Ghana, Greater Accra. That person is the data controller under Ghana's Data Protection Act, 2012 and the GDPR, and the business responsible under the CCPA. For anything in this policy, write to optimizeincghana@gmail.com.

What the app collects

Nothing. That is not a summary of a longer list — the release build makes no network requests at all. There is no analytics SDK, no crash reporter that uploads, no remote configuration, no advertising identifier and no telemetry of any kind.

You do not create an account, so we never learn your name, your email address or your device identifier through the app. There is no server for that information to sit on.

You do not have to take our word for it. Run the app behind an HTTP proxy for as long as you like and watch what leaves. The answer is nothing.

Where your data lives

  • Every transaction, wallet, category, budget, client, project and receipt image is stored in a database file on your device, and nowhere else.
  • That database is encrypted at rest with SQLCipher. The encryption key is generated on the device and stored in the iOS Keychain or the Android Keystore.
  • The key is marked as available only on this device while unlocked, which deliberately excludes it from iCloud Keychain backups. If it synced, the claim that nothing leaves the device would not be true.
  • Uninstalling the app deletes the database with it. If you have no backup, the data is gone — including for us.

Backups are yours, and they are not encrypted

The app can export a backup file containing your records and your receipt images. You choose where it goes through the normal share sheet — iCloud Drive, Google Drive, Dropbox, a laptop, a USB stick. It never passes through us.

That file is exported decrypted. The device encryption key cannot travel to another phone, so a backup that used it would be useless for restoring. This is a deliberate trade for portability, and it has a consequence worth being blunt about: anyone who obtains the file can read it. If you keep backups in cloud storage, encrypt them yourself, or keep them somewhere you control.

Permissions the app asks for

Each is requested at the moment you first use the feature that needs it, never during onboarding, and each can be refused without the rest of the app breaking.

  • Camera and photo library — to attach a receipt photo to a transaction. The image is compressed and stored on the device with the record. It is not uploaded.
  • Notifications — to warn you when a budget crosses a threshold. These are scheduled locally by the app. There is no push token, no notification server and no remote delivery.
  • Face ID, Touch ID or the Android biometric prompt — to unlock the app. The comparison is performed by the operating system; the app receives only a success-or-failure answer and never sees biometric data.

This website

  • No cookies are set. That is why there is no cookie banner.
  • No analytics, no tag manager, no advertising or social pixels.
  • Nothing is loaded from a third-party origin. The fonts and the store badges are served from this domain rather than from Google Fonts or a CDN, because a font request would hand your IP address to someone else.
  • Whoever hosts this site keeps ordinary server logs, which typically include IP addresses and are used to serve pages and stop abuse. We do not combine them with anything else.

If you contact us

Then we have whatever you chose to send. By email that is your email address and the message; on WhatsApp it is your phone number, your WhatsApp profile name and the message. We use it to reply and, where you have described a problem or asked for a feature, to decide what to build. We do not add you to a mailing list — there is no mailing list. Ask us to delete the correspondence and we will.

WhatsApp is the one third party in this policy. It is operated by Meta, the messages travel through their service, and what they do with the metadata around a conversation is governed by their privacy policy, not this one. Email reaches us without going through them. If that distinction matters to you, use email.

Buying the app

Purchases are handled entirely by Apple or Google. They are the seller, they take the payment, and we never see your card details or your billing address. They provide us with sales and diagnostic information — typically aggregated figures such as units sold by country, and sometimes limited details attached to a specific transaction or review.

That data is theirs first, and their handling of it is governed by their policies, not this one. None of it includes anything from inside your ledger, because your ledger never reaches them either.

Children

The app is a tool for managing money and is not directed at children. We do not knowingly collect anything from anyone, which includes children.

Your rights

Depending on where you live, you may have rights to access, correct, delete or export the personal data an organisation holds about you, to object to its processing, or to complain to a supervisory authority. That includes Ghana's Data Protection Act, 2012 (Act 843), which is the law we are established under, as well as the GDPR in the UK and EU and the CCPA in California — the app is sold worldwide through both stores, so more than one of these can apply at once.

In our case most of those requests have a short answer: the only personal data we are likely to hold about you is an email you sent us. Your financial records are not ours to access, export or delete — they are on your device, and the app can already export them for you at any time. We have never sold personal data and have nothing to sell.

To exercise any of this, write to optimizeincghana@gmail.com.

Changes

If this policy changes, the effective date at the top of this page changes with it. If a change ever meant the app started collecting something, that would be announced in the app before it took effect, not quietly published here.

Contact

optimizeincghana@gmail.com
WhatsApp +233 24 020 9723
Denzel Hayford, trading as Denzel Hayford
coffret.myoptimizeinc.com